Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2024-03-18_f738e0b8dc6d5f8084286effd18942a1_cryptolocker

  • Size

    127KB

  • Sample

    240318-vcmnlsde48

  • MD5

    f738e0b8dc6d5f8084286effd18942a1

  • SHA1

    a00e42931b1ed07f08243453b96cd97614d60b10

  • SHA256

    d4851b16932b62b76304d460282bc096765602eb2fb98fc371109ea7c8a79532

  • SHA512

    1ad19b78266fab917189dfb16f34a744f89115f6ce090d5aabe90179a33714673ec04f06c182a5cc1cce4eee8dbb79e456e24466665dcce90ba5edac5ca9be80

  • SSDEEP

    1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVNi:vCA9OtEvwDpjm

Score
10/10

Malware Config

Targets

    • Target

      2024-03-18_f738e0b8dc6d5f8084286effd18942a1_cryptolocker

    • Size

      127KB

    • MD5

      f738e0b8dc6d5f8084286effd18942a1

    • SHA1

      a00e42931b1ed07f08243453b96cd97614d60b10

    • SHA256

      d4851b16932b62b76304d460282bc096765602eb2fb98fc371109ea7c8a79532

    • SHA512

      1ad19b78266fab917189dfb16f34a744f89115f6ce090d5aabe90179a33714673ec04f06c182a5cc1cce4eee8dbb79e456e24466665dcce90ba5edac5ca9be80

    • SSDEEP

      1536:gUj+AIMOtEvwDpjNbwQEIPlemUhYwkkxGBpVNi:vCA9OtEvwDpjm

    Score
    9/10
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks